[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 29.412339] IPVS: ftp: loaded support on port[0] = 21 [ 29.830043] can: request_module (can-proto-0) failed. [ 30.973363] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.253' (ECDSA) to the list of known hosts. 2021/03/23 07:10:38 parsed 1 programs 2021/03/23 07:10:38 executed programs: 0 [ 37.597881] IPVS: ftp: loaded support on port[0] = 21 [ 37.609391] IPVS: ftp: loaded support on port[0] = 21 [ 37.631008] IPVS: ftp: loaded support on port[0] = 21 [ 37.668810] IPVS: ftp: loaded support on port[0] = 21 [ 37.686775] IPVS: ftp: loaded support on port[0] = 21 [ 37.718458] IPVS: ftp: loaded support on port[0] = 21 [ 37.944404] chnl_net:caif_netlink_parms(): no params data found [ 37.976072] chnl_net:caif_netlink_parms(): no params data found [ 38.028530] chnl_net:caif_netlink_parms(): no params data found [ 38.041258] chnl_net:caif_netlink_parms(): no params data found [ 38.077672] chnl_net:caif_netlink_parms(): no params data found [ 38.188797] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.200906] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.210266] device bridge_slave_0 entered promiscuous mode [ 38.225757] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.237533] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.248116] device bridge_slave_0 entered promiscuous mode [ 38.261605] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.271226] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.280077] device bridge_slave_0 entered promiscuous mode [ 38.300122] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.310415] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.321174] device bridge_slave_1 entered promiscuous mode [ 38.347339] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.356314] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.369256] device bridge_slave_1 entered promiscuous mode [ 38.378274] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.387511] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.400011] device bridge_slave_1 entered promiscuous mode [ 38.410470] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.418861] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.430494] device bridge_slave_0 entered promiscuous mode [ 38.440304] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.449728] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.460052] device bridge_slave_0 entered promiscuous mode [ 38.471087] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.488096] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.510657] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.519728] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.530451] device bridge_slave_1 entered promiscuous mode [ 38.538017] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.545169] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.554967] device bridge_slave_1 entered promiscuous mode [ 38.582174] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.590940] chnl_net:caif_netlink_parms(): no params data found [ 38.609200] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.619747] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.631076] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 38.639767] team0: Port device team_slave_0 added [ 38.646308] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 38.656432] team0: Port device team_slave_1 added [ 38.664101] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.683306] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.692994] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.706233] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.725719] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.750194] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.763736] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 38.773758] team0: Port device team_slave_0 added [ 38.787961] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.798656] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 38.814026] team0: Port device team_slave_0 added [ 38.821673] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 38.836094] team0: Port device team_slave_0 added [ 38.847211] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 38.859000] team0: Port device team_slave_1 added [ 38.867520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.881960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.897874] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 38.910092] team0: Port device team_slave_1 added [ 38.919084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.975214] device hsr_slave_0 entered promiscuous mode [ 39.023522] device hsr_slave_1 entered promiscuous mode [ 39.074986] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.084038] team0: Port device team_slave_1 added [ 39.097595] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.106932] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.117348] device bridge_slave_0 entered promiscuous mode [ 39.130012] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.138672] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.148540] device bridge_slave_1 entered promiscuous mode [ 39.161538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.174770] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.188111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.235954] device hsr_slave_0 entered promiscuous mode [ 39.283366] device hsr_slave_1 entered promiscuous mode [ 39.343716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.352299] team0: Port device team_slave_0 added [ 39.369312] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.377444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.390486] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.401757] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.411099] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.421519] team0: Port device team_slave_1 added [ 39.486054] device hsr_slave_0 entered promiscuous mode [ 39.523294] device hsr_slave_1 entered promiscuous mode [ 39.563886] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.572738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.583446] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.599869] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.609396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.654874] device hsr_slave_0 entered promiscuous mode [ 39.704044] device hsr_slave_1 entered promiscuous mode [ 39.754457] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.781125] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.792501] team0: Port device team_slave_0 added [ 39.806821] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.821551] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.837041] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 39.847322] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.860266] team0: Port device team_slave_1 added [ 39.924902] device hsr_slave_0 entered promiscuous mode [ 39.983218] device hsr_slave_1 entered promiscuous mode [ 40.025550] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.040984] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.054981] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.066945] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.083728] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.098644] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.110196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.157023] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.196708] device hsr_slave_0 entered promiscuous mode [ 40.233333] device hsr_slave_1 entered promiscuous mode [ 40.274860] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.285425] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.326545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.339296] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.360920] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.380831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.390444] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 40.414925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.422625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.432887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.447247] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.460860] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.470441] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.479978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.494122] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.505485] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 40.512278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.522148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.531843] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.539065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.549720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.558646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.568851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.585970] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 40.596170] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.604857] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.612167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.621122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.630236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.640109] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.647531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.656876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.665490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.676290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 40.689950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.699296] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.706776] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.718617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.729306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.743774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.753228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.762225] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.771504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.783066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.793661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 40.805922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 40.817331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.829381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.838784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.850725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.864083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.875160] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.886492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 40.896934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.908879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.922426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.932874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.944541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.954670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.965206] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.974330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.984297] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.994978] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.006029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.017767] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 41.027969] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.037265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.049384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.060524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.069302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.081609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.093496] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.102573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.111853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.122552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.136704] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.147047] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.155645] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.165867] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 41.179420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.189658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.199902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.208307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.217574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.227814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.239634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.254148] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.262812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.271988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.285556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.296547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.308427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.320594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.329479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.338888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.350223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.359786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.371213] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.379522] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.387372] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.396441] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.408227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.418774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.431114] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.438016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.446954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.457034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.470406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.482794] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.494502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.507145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.517431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.528425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.537793] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.545262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.554065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.562719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.572600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.581734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.591746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.601239] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.609441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.619864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.629678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.639899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.654514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.669890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.681202] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.694676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.705538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.722952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.737429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.751548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.767969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.780425] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.789817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.801629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.812274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.825997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.837501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.849746] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.857446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.869707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.879603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.888278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.897429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.907824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.922254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 41.932839] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 41.943083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.953110] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.963015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.974587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.984633] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.992915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.001489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.012842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.022795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.032784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.042814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.052983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.063300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.072489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.081762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.093716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.106972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.118293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.130281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.140054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.152399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.161646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.175567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.184495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.194041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.203393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.212683] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.219877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.229927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.240472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.254572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.264484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.273601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.282876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.293328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.301451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.312312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.322591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.331825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.344792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.360839] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.374856] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.383452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.391550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.401454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.411980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.421691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.431541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.443392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.451749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.464992] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.474263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.484547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.501718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.515382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.528752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.539753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.550951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.561073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.572914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.589874] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.602434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.613042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.621951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.636059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.649884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.664913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.675016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.686250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.696403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.709145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.728796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.739001] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.747903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.760358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.770413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.781009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.793198] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.800548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.810862] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.821103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.846355] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.859055] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.878195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.900488] 8021q: adding VLAN 0 to HW filter on device batadv0 2021/03/23 07:10:44 executed programs: 6 [ 44.457064] BUG: sleeping function called from invalid context at kernel/workqueue.c:2861 [ 44.467718] in_atomic(): 1, irqs_disabled(): 0, pid: 6544, name: syz-executor.3 [ 44.476473] 2 locks held by syz-executor.3/6544: [ 44.482167] #0: 000000003c3084c3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 44.492572] #1: 00000000945a4137 (&qdisc_rx_lock){+...}, at: red_change+0x40a/0x1870 [ 44.503159] Preemption disabled at: [ 44.503170] [] red_change+0x40a/0x1870 [ 44.514846] CPU: 1 PID: 6544 Comm: syz-executor.3 Not tainted 4.19.182-syzkaller #0 [ 44.523450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.535310] Call Trace: [ 44.538517] dump_stack+0x123/0x171 [ 44.542965] ? red_change+0x40a/0x1870 [ 44.547244] ___might_sleep.cold.86+0x1bb/0x1f4 [ 44.552947] __might_sleep+0x95/0x190 [ 44.557976] __flush_work+0xc7/0x800 [ 44.562139] ? __kasan_slab_free+0x102/0x150 [ 44.566741] ? kasan_slab_free+0xe/0x10 [ 44.571912] ? insert_work+0x350/0x350 [ 44.575974] ? mark_held_locks+0xc7/0x130 [ 44.580701] ? try_to_grab_pending+0xaf/0x5e0 [ 44.585526] ? __cancel_work_timer+0x14f/0x430 [ 44.590781] ? cancel_work_sync+0xb/0x10 [ 44.595757] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 44.602239] ? __cancel_work_timer+0x14f/0x430 [ 44.607227] ? trace_hardirqs_on+0x28/0x190 [ 44.612705] __cancel_work_timer+0x2f1/0x430 [ 44.618368] ? try_to_grab_pending+0x5e0/0x5e0 [ 44.623981] ? hrtimer_try_to_cancel+0x6c/0x510 [ 44.629917] ? hrtimer_fixup_activate+0x20/0x20 [ 44.635497] ? mark_held_locks+0xc7/0x130 [ 44.640090] cancel_work_sync+0xb/0x10 [ 44.644767] htb_destroy+0x20/0x4c0 [ 44.649185] ? htb_reset+0x2cd/0x4c0 [ 44.654127] qdisc_destroy+0x134/0x6d0 [ 44.658760] ? do_raw_spin_lock+0xd0/0x240 [ 44.664185] red_change+0x626/0x1870 [ 44.668803] ? apparmor_capable+0x224/0x420 [ 44.674323] ? red_enqueue+0x1fd0/0x1fd0 [ 44.679285] ? nla_strcmp+0x99/0xe0 [ 44.683645] tc_modify_qdisc+0xbd9/0x18f0 [ 44.689044] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 44.695077] ? qdisc_create+0xf60/0xf60 [ 44.700111] ? find_held_lock+0x36/0x1d0 [ 44.704616] rtnetlink_rcv_msg+0x34f/0x8f0 [ 44.710835] ? rtnetlink_put_metrics+0x490/0x490 [ 44.717519] ? find_held_lock+0x36/0x1d0 [ 44.723104] netlink_rcv_skb+0x13e/0x3d0 [ 44.727830] ? lock_downgrade+0x860/0x860 [ 44.732564] ? rtnetlink_put_metrics+0x490/0x490 [ 44.739174] ? netlink_ack+0xa70/0xa70 [ 44.744292] ? netlink_deliver_tap+0x182/0xb00 [ 44.751118] rtnetlink_rcv+0x10/0x20 [ 44.756311] netlink_unicast+0x445/0x640 [ 44.761847] ? netlink_attachskb+0x6d0/0x6d0 [ 44.766996] ? _copy_from_iter_full+0x182/0x720 [ 44.773204] ? __check_object_size+0x1ef/0x310 [ 44.778806] ? security_socket_getpeersec_dgram+0x53/0xa0 [ 44.787409] netlink_sendmsg+0x764/0xc70 [ 44.792815] ? netlink_unicast+0x640/0x640 [ 44.797580] ? apparmor_socket_sendmsg+0x1b/0x20 [ 44.803858] ? netlink_unicast+0x640/0x640 [ 44.809048] sock_sendmsg+0xb5/0xf0 [ 44.813856] ___sys_sendmsg+0x647/0x950 [ 44.819490] ? find_held_lock+0x36/0x1d0 [ 44.824025] ? copy_msghdr_from_user+0x430/0x430 [ 44.830417] ? __fget+0x278/0x400 [ 44.834864] ? kasan_check_read+0x11/0x20 [ 44.839988] ? __fget+0x295/0x400 [ 44.844418] ? expand_files.part.8+0x700/0x700 [ 44.849738] ? kasan_check_read+0x11/0x20 [ 44.854611] ? _copy_to_user+0x91/0xb0 [ 44.858916] ? __fget_light+0x174/0x1e0 [ 44.864232] ? __fdget+0xe/0x10 [ 44.867832] __sys_sendmsg+0xd9/0x180 [ 44.873003] ? __ia32_sys_shutdown+0x70/0x70 [ 44.878512] ? __x64_sys_futex+0x1cb/0x3a0 [ 44.883714] ? fd_install+0x47/0x60 [ 44.888467] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 44.894460] __x64_sys_sendmsg+0x73/0xb0 [ 44.899514] do_syscall_64+0xd0/0x4e0 [ 44.904118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 44.909772] RIP: 0033:0x461229 [ 44.914300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 44.936000] RSP: 002b:00007f99790331a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.945885] RAX: ffffffffffffffda RBX: 000000000052bfa8 RCX: 0000000000461229 [ 44.955114] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 44.963924] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 44.971905] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 44.982682] R13: 00000000004f6ab8 R14: 00000000004b3761 R15: 00007f99790336bc [ 45.738041] BUG: sleeping function called from invalid context at kernel/workqueue.c:2861 [ 45.751749] in_atomic(): 1, irqs_disabled(): 0, pid: 6560, name: syz-executor.2 [ 45.763908] 2 locks held by syz-executor.2/6560: [ 45.774804] #0: 000000003c3084c3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 45.797318] #1: 0000000091cce3d1 (&qdisc_rx_lock){+...}, at: red_change+0x40a/0x1870 [ 45.819262] Preemption disabled at: [ 45.819275] [] red_change+0x40a/0x1870 [ 45.848208] CPU: 1 PID: 6560 Comm: syz-executor.2 Tainted: G W 4.19.182-syzkaller #0 [ 45.864452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.878845] Call Trace: [ 45.882192] dump_stack+0x123/0x171 [ 45.886322] ? red_change+0x40a/0x1870 [ 45.891212] ___might_sleep.cold.86+0x1bb/0x1f4 [ 45.897303] __might_sleep+0x95/0x190 [ 45.902858] __flush_work+0xc7/0x800 [ 45.909311] ? __kasan_slab_free+0x102/0x150 [ 45.916140] ? kasan_slab_free+0xe/0x10 [ 45.922964] ? insert_work+0x350/0x350 [ 45.929748] ? mark_held_locks+0xc7/0x130 [ 45.934609] ? try_to_grab_pending+0xaf/0x5e0 [ 45.943096] ? __cancel_work_timer+0x14f/0x430 [ 45.951510] ? cancel_work_sync+0xb/0x10 [ 45.956545] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 45.962499] ? __cancel_work_timer+0x14f/0x430 [ 45.968118] ? trace_hardirqs_on+0x28/0x190 [ 45.973512] __cancel_work_timer+0x2f1/0x430 [ 45.979966] ? try_to_grab_pending+0x5e0/0x5e0 [ 45.985262] ? hrtimer_try_to_cancel+0x6c/0x510 [ 45.990644] ? hrtimer_fixup_activate+0x20/0x20 [ 45.996255] ? mark_held_locks+0xc7/0x130 [ 46.002152] cancel_work_sync+0xb/0x10 [ 46.007180] htb_destroy+0x20/0x4c0 [ 46.012543] ? htb_reset+0x2cd/0x4c0 [ 46.017663] qdisc_destroy+0x134/0x6d0 [ 46.022902] ? do_raw_spin_lock+0xd0/0x240 [ 46.029103] red_change+0x626/0x1870 [ 46.034724] ? apparmor_capable+0x224/0x420 [ 46.040088] ? red_enqueue+0x1fd0/0x1fd0 [ 46.045380] ? nla_strcmp+0x99/0xe0 [ 46.050165] tc_modify_qdisc+0xbd9/0x18f0 [ 46.056566] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 46.061953] ? qdisc_create+0xf60/0xf60 [ 46.066422] ? find_held_lock+0x36/0x1d0 [ 46.071655] rtnetlink_rcv_msg+0x34f/0x8f0 [ 46.077209] ? rtnetlink_put_metrics+0x490/0x490 [ 46.084966] ? find_held_lock+0x36/0x1d0 [ 46.090782] netlink_rcv_skb+0x13e/0x3d0 [ 46.095619] ? lock_downgrade+0x860/0x860 [ 46.101005] ? rtnetlink_put_metrics+0x490/0x490 [ 46.107550] ? netlink_ack+0xa70/0xa70 [ 46.112146] ? netlink_deliver_tap+0x182/0xb00 [ 46.117983] rtnetlink_rcv+0x10/0x20 [ 46.123032] netlink_unicast+0x445/0x640 [ 46.127964] ? netlink_attachskb+0x6d0/0x6d0 [ 46.132748] ? _copy_from_iter_full+0x182/0x720 [ 46.138983] ? __check_object_size+0x1ef/0x310 [ 46.144058] ? security_socket_getpeersec_dgram+0x53/0xa0 [ 46.151149] netlink_sendmsg+0x764/0xc70 [ 46.155693] ? netlink_unicast+0x640/0x640 [ 46.161434] ? apparmor_socket_sendmsg+0x1b/0x20 [ 46.166965] ? netlink_unicast+0x640/0x640 [ 46.171757] sock_sendmsg+0xb5/0xf0 [ 46.176463] ___sys_sendmsg+0x647/0x950 [ 46.181999] ? find_held_lock+0x36/0x1d0 [ 46.187028] ? copy_msghdr_from_user+0x430/0x430 [ 46.192123] ? __fget+0x278/0x400 [ 46.196391] ? kasan_check_read+0x11/0x20 [ 46.201483] ? __fget+0x295/0x400 [ 46.206307] ? expand_files.part.8+0x700/0x700 [ 46.211543] ? kasan_check_read+0x11/0x20 [ 46.218660] ? _copy_to_user+0x91/0xb0 [ 46.223538] ? __fget_light+0x174/0x1e0 [ 46.227794] ? __fdget+0xe/0x10 [ 46.231524] __sys_sendmsg+0xd9/0x180 [ 46.235981] ? __ia32_sys_shutdown+0x70/0x70 [ 46.242015] ? __x64_sys_futex+0x1cb/0x3a0 [ 46.247495] ? fd_install+0x47/0x60 [ 46.252158] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.258673] __x64_sys_sendmsg+0x73/0xb0 [ 46.263535] do_syscall_64+0xd0/0x4e0 [ 46.267780] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.274388] RIP: 0033:0x461229 [ 46.277879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 46.302339] RSP: 002b:00007f9e4b2021a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.313440] RAX: ffffffffffffffda RBX: 000000000052bfa8 RCX: 0000000000461229 [ 46.322702] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 46.333878] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 46.342078] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 46.352088] R13: 00000000004f6ab8 R14: 00000000004b3761 R15: 00007f9e4b2026bc [ 46.817557] BUG: sleeping function called from invalid context at kernel/workqueue.c:2861 [ 46.829706] in_atomic(): 1, irqs_disabled(): 0, pid: 6575, name: syz-executor.3 [ 46.840521] 2 locks held by syz-executor.3/6575: [ 46.846630] #0: 000000003c3084c3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 46.860044] #1: 00000000b4eaef46 (&qdisc_rx_lock){+...}, at: red_change+0x40a/0x1870 [ 46.872748] Preemption disabled at: [ 46.872760] [] red_change+0x40a/0x1870 [ 46.886708] CPU: 1 PID: 6575 Comm: syz-executor.3 Tainted: G W 4.19.182-syzkaller #0 [ 46.902447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.916052] Call Trace: [ 46.919575] dump_stack+0x123/0x171 [ 46.924335] ? red_change+0x40a/0x1870 [ 46.929939] ___might_sleep.cold.86+0x1bb/0x1f4 [ 46.936072] __might_sleep+0x95/0x190 [ 46.941835] __flush_work+0xc7/0x800 [ 46.946824] ? __kasan_slab_free+0x102/0x150 [ 46.954016] ? kasan_slab_free+0xe/0x10 [ 46.961505] ? insert_work+0x350/0x350 [ 46.966855] ? mark_held_locks+0xc7/0x130 [ 46.971689] ? try_to_grab_pending+0xaf/0x5e0 [ 46.977630] ? __cancel_work_timer+0x14f/0x430 [ 46.983474] ? cancel_work_sync+0xb/0x10 [ 46.989041] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 46.995553] ? __cancel_work_timer+0x14f/0x430 [ 47.001514] ? trace_hardirqs_on+0x28/0x190 [ 47.006013] __cancel_work_timer+0x2f1/0x430 [ 47.012348] ? try_to_grab_pending+0x5e0/0x5e0 [ 47.018762] ? hrtimer_try_to_cancel+0x6c/0x510 [ 47.024622] ? hrtimer_fixup_activate+0x20/0x20 [ 47.029901] ? mark_held_locks+0xc7/0x130 [ 47.035123] cancel_work_sync+0xb/0x10 [ 47.040666] htb_destroy+0x20/0x4c0 [ 47.045361] ? htb_reset+0x2cd/0x4c0 [ 47.049162] qdisc_destroy+0x134/0x6d0 [ 47.053972] ? do_raw_spin_lock+0xd0/0x240 [ 47.059449] red_change+0x626/0x1870 [ 47.064719] ? apparmor_capable+0x224/0x420 [ 47.069791] ? red_enqueue+0x1fd0/0x1fd0 [ 47.074767] ? nla_strcmp+0x99/0xe0 [ 47.080538] tc_modify_qdisc+0xbd9/0x18f0 [ 47.085916] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 47.091016] ? qdisc_create+0xf60/0xf60 [ 47.096075] ? find_held_lock+0x36/0x1d0 [ 47.100507] rtnetlink_rcv_msg+0x34f/0x8f0 [ 47.106768] ? rtnetlink_put_metrics+0x490/0x490 [ 47.113159] ? find_held_lock+0x36/0x1d0 [ 47.117888] netlink_rcv_skb+0x13e/0x3d0 [ 47.122701] ? lock_downgrade+0x860/0x860 [ 47.128170] ? rtnetlink_put_metrics+0x490/0x490 [ 47.133392] ? netlink_ack+0xa70/0xa70 [ 47.137769] ? netlink_deliver_tap+0x182/0xb00 [ 47.143631] rtnetlink_rcv+0x10/0x20 [ 47.148242] netlink_unicast+0x445/0x640 [ 47.153907] ? netlink_attachskb+0x6d0/0x6d0 [ 47.160276] ? _copy_from_iter_full+0x182/0x720 [ 47.165596] ? __check_object_size+0x1ef/0x310 [ 47.171263] ? security_socket_getpeersec_dgram+0x53/0xa0 [ 47.178517] netlink_sendmsg+0x764/0xc70 [ 47.183681] ? netlink_unicast+0x640/0x640 [ 47.188997] ? apparmor_socket_sendmsg+0x1b/0x20 [ 47.195409] ? netlink_unicast+0x640/0x640 [ 47.201246] sock_sendmsg+0xb5/0xf0 [ 47.206062] ___sys_sendmsg+0x647/0x950 [ 47.211152] ? find_held_lock+0x36/0x1d0 [ 47.216560] ? copy_msghdr_from_user+0x430/0x430 [ 47.223732] ? __fget+0x278/0x400 [ 47.229317] ? kasan_check_read+0x11/0x20 [ 47.236109] ? __fget+0x295/0x400 [ 47.241071] ? expand_files.part.8+0x700/0x700 [ 47.248685] ? kasan_check_read+0x11/0x20 [ 47.255664] ? _copy_to_user+0x91/0xb0 [ 47.262615] ? __fget_light+0x174/0x1e0 [ 47.268528] ? __fdget+0xe/0x10 [ 47.272921] __sys_sendmsg+0xd9/0x180 [ 47.278030] ? __ia32_sys_shutdown+0x70/0x70 [ 47.283461] ? __x64_sys_futex+0x1cb/0x3a0 [ 47.289420] ? fd_install+0x47/0x60 [ 47.293708] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.300609] __x64_sys_sendmsg+0x73/0xb0 [ 47.305395] do_syscall_64+0xd0/0x4e0 [ 47.309557] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.315608] RIP: 0033:0x461229 [ 47.318971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 47.343761] RSP: 002b:00007f99790331a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.353523] RAX: ffffffffffffffda RBX: 000000000052bfa8 RCX: 0000000000461229 [ 47.363378] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 47.371605] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 47.379643] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 47.389740] R13: 00000000004f6ab8 R14: 00000000004b3761 R15: 00007f99790336bc 2021/03/23 07:10:49 executed programs: 15 [ 48.177789] BUG: sleeping function called from invalid context at kernel/workqueue.c:2861 [ 48.190839] in_atomic(): 1, irqs_disabled(): 0, pid: 6596, name: syz-executor.1 [ 48.201994] 2 locks held by syz-executor.1/6596: [ 48.207688] #0: 000000003c3084c3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 48.217490] #1: 0000000042effe47 (&qdisc_rx_lock){+...}, at: red_change+0x40a/0x1870 [ 48.226876] Preemption disabled at: [ 48.226889] [] red_change+0x40a/0x1870 [ 48.238773] CPU: 0 PID: 6596 Comm: syz-executor.1 Tainted: G W 4.19.182-syzkaller #0 [ 48.251458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.264279] Call Trace: [ 48.267591] dump_stack+0x123/0x171 [ 48.272346] ? red_change+0x40a/0x1870 [ 48.278787] ___might_sleep.cold.86+0x1bb/0x1f4 [ 48.284747] __might_sleep+0x95/0x190 [ 48.290194] __flush_work+0xc7/0x800 [ 48.295674] ? __kasan_slab_free+0x102/0x150 [ 48.302540] ? kasan_slab_free+0xe/0x10 [ 48.308390] ? insert_work+0x350/0x350 [ 48.313321] ? mark_held_locks+0xc7/0x130 [ 48.318324] ? try_to_grab_pending+0xaf/0x5e0 [ 48.324271] ? __cancel_work_timer+0x14f/0x430 [ 48.330869] ? cancel_work_sync+0xb/0x10 [ 48.336573] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 48.342367] ? __cancel_work_timer+0x14f/0x430 [ 48.347505] ? trace_hardirqs_on+0x28/0x190 [ 48.353086] __cancel_work_timer+0x2f1/0x430 [ 48.359338] ? try_to_grab_pending+0x5e0/0x5e0 [ 48.365759] ? hrtimer_try_to_cancel+0x6c/0x510 [ 48.371415] ? hrtimer_fixup_activate+0x20/0x20 [ 48.377734] ? mark_held_locks+0xc7/0x130 [ 48.382907] cancel_work_sync+0xb/0x10 [ 48.387884] htb_destroy+0x20/0x4c0 [ 48.392441] ? htb_reset+0x2cd/0x4c0 [ 48.397474] qdisc_destroy+0x134/0x6d0 [ 48.402576] ? do_raw_spin_lock+0xd0/0x240 [ 48.407881] red_change+0x626/0x1870 [ 48.412785] ? apparmor_capable+0x224/0x420 [ 48.418395] ? red_enqueue+0x1fd0/0x1fd0 [ 48.423046] ? nla_strcmp+0x99/0xe0 [ 48.428967] tc_modify_qdisc+0xbd9/0x18f0 [ 48.435291] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 48.442965] ? qdisc_create+0xf60/0xf60 [ 48.449192] ? find_held_lock+0x36/0x1d0 [ 48.454832] rtnetlink_rcv_msg+0x34f/0x8f0 [ 48.461009] ? rtnetlink_put_metrics+0x490/0x490 [ 48.466347] ? find_held_lock+0x36/0x1d0 [ 48.471643] netlink_rcv_skb+0x13e/0x3d0 [ 48.477928] ? lock_downgrade+0x860/0x860 [ 48.484585] ? rtnetlink_put_metrics+0x490/0x490 [ 48.489871] ? netlink_ack+0xa70/0xa70 [ 48.494670] ? netlink_deliver_tap+0x182/0xb00 [ 48.500658] rtnetlink_rcv+0x10/0x20 [ 48.507769] netlink_unicast+0x445/0x640 [ 48.513851] ? netlink_attachskb+0x6d0/0x6d0 [ 48.519354] ? _copy_from_iter_full+0x182/0x720 [ 48.525779] ? __check_object_size+0x1ef/0x310 [ 48.532472] ? security_socket_getpeersec_dgram+0x53/0xa0 [ 48.538655] netlink_sendmsg+0x764/0xc70 [ 48.543706] ? netlink_unicast+0x640/0x640 [ 48.548879] ? apparmor_socket_sendmsg+0x1b/0x20 [ 48.554586] ? netlink_unicast+0x640/0x640 [ 48.559100] sock_sendmsg+0xb5/0xf0 [ 48.563449] ___sys_sendmsg+0x647/0x950 [ 48.568542] ? find_held_lock+0x36/0x1d0 [ 48.573683] ? copy_msghdr_from_user+0x430/0x430 [ 48.579654] ? __fget+0x278/0x400 [ 48.583391] ? kasan_check_read+0x11/0x20 [ 48.588219] ? __fget+0x295/0x400 [ 48.592261] ? expand_files.part.8+0x700/0x700 [ 48.598237] ? kasan_check_read+0x11/0x20 [ 48.603667] ? _copy_to_user+0x91/0xb0 [ 48.609804] ? __fget_light+0x174/0x1e0 [ 48.615156] ? __fdget+0xe/0x10 [ 48.618814] __sys_sendmsg+0xd9/0x180 [ 48.622915] ? __ia32_sys_shutdown+0x70/0x70 [ 48.627587] ? __x64_sys_futex+0x1cb/0x3a0 [ 48.631802] ? fd_install+0x47/0x60 [ 48.635855] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.642293] __x64_sys_sendmsg+0x73/0xb0 [ 48.649720] do_syscall_64+0xd0/0x4e0 [ 48.656458] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.664997] RIP: 0033:0x461229 [ 48.669672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 48.695939] RSP: 002b:00007f7ef30c11a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.705980] RAX: ffffffffffffffda RBX: 000000000052bfa8 RCX: 0000000000461229 [ 48.718255] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 48.729319] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 48.739452] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 48.748250] R13: 00000000004f6ab8 R14: 00000000004b3761 R15: 00007f7ef30c16bc [ 49.427693] BUG: sleeping function called from invalid context at kernel/workqueue.c:2861 [ 49.439775] in_atomic(): 1, irqs_disabled(): 0, pid: 6616, name: syz-executor.3 [ 49.450823] 2 locks held by syz-executor.3/6616: [ 49.459189] #0: 000000003c3084c3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 49.470851] #1: 00000000a7abe97d (&qdisc_rx_lock){+...}, at: red_change+0x40a/0x1870 [ 49.483840] Preemption disabled at: [ 49.483851] [] red_change+0x40a/0x1870 [ 49.496675] CPU: 0 PID: 6616 Comm: syz-executor.3 Tainted: G W 4.19.182-syzkaller #0 [ 49.506732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.520455] Call Trace: [ 49.523665] dump_stack+0x123/0x171 [ 49.527788] ? red_change+0x40a/0x1870 [ 49.532790] ___might_sleep.cold.86+0x1bb/0x1f4 [ 49.537910] __might_sleep+0x95/0x190 [ 49.543543] __flush_work+0xc7/0x800 [ 49.548237] ? __kasan_slab_free+0x102/0x150 [ 49.553852] ? kasan_slab_free+0xe/0x10 [ 49.561377] ? insert_work+0x350/0x350 [ 49.566935] ? mark_held_locks+0xc7/0x130 [ 49.575199] ? try_to_grab_pending+0xaf/0x5e0 [ 49.580625] ? __cancel_work_timer+0x14f/0x430 [ 49.585783] ? cancel_work_sync+0xb/0x10 [ 49.590100] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 49.594894] ? __cancel_work_timer+0x14f/0x430 [ 49.600059] ? trace_hardirqs_on+0x28/0x190 [ 49.605562] __cancel_work_timer+0x2f1/0x430 [ 49.611757] ? try_to_grab_pending+0x5e0/0x5e0 [ 49.617855] ? hrtimer_try_to_cancel+0x6c/0x510 [ 49.623335] ? hrtimer_fixup_activate+0x20/0x20 [ 49.629229] ? mark_held_locks+0xc7/0x130 [ 49.634485] cancel_work_sync+0xb/0x10 [ 49.639923] htb_destroy+0x20/0x4c0 [ 49.643968] ? htb_reset+0x2cd/0x4c0 [ 49.648284] qdisc_destroy+0x134/0x6d0 [ 49.652856] ? do_raw_spin_lock+0xd0/0x240 [ 49.657659] red_change+0x626/0x1870 [ 49.662521] ? apparmor_capable+0x224/0x420 [ 49.667835] ? red_enqueue+0x1fd0/0x1fd0 [ 49.672849] ? nla_strcmp+0x99/0xe0 [ 49.678439] tc_modify_qdisc+0xbd9/0x18f0 [ 49.683674] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 49.689761] ? qdisc_create+0xf60/0xf60 [ 49.694728] ? find_held_lock+0x36/0x1d0 [ 49.699047] rtnetlink_rcv_msg+0x34f/0x8f0 [ 49.704304] ? rtnetlink_put_metrics+0x490/0x490 [ 49.712872] ? find_held_lock+0x36/0x1d0 [ 49.719130] netlink_rcv_skb+0x13e/0x3d0 [ 49.726056] ? lock_downgrade+0x860/0x860 [ 49.731627] ? rtnetlink_put_metrics+0x490/0x490 [ 49.739498] ? netlink_ack+0xa70/0xa70 [ 49.745464] ? netlink_deliver_tap+0x182/0xb00 [ 49.751242] rtnetlink_rcv+0x10/0x20 [ 49.755419] netlink_unicast+0x445/0x640 [ 49.760621] ? netlink_attachskb+0x6d0/0x6d0 [ 49.766619] ? _copy_from_iter_full+0x182/0x720 [ 49.773944] ? __check_object_size+0x1ef/0x310 [ 49.781074] ? security_socket_getpeersec_dgram+0x53/0xa0 [ 49.788731] netlink_sendmsg+0x764/0xc70 [ 49.796052] ? netlink_unicast+0x640/0x640 [ 49.802023] ? apparmor_socket_sendmsg+0x1b/0x20 [ 49.807950] ? netlink_unicast+0x640/0x640 [ 49.813044] sock_sendmsg+0xb5/0xf0 [ 49.817942] ___sys_sendmsg+0x647/0x950 [ 49.822691] ? find_held_lock+0x36/0x1d0 [ 49.828783] ? copy_msghdr_from_user+0x430/0x430 [ 49.834558] ? __fget+0x278/0x400 [ 49.839170] ? kasan_check_read+0x11/0x20 [ 49.844696] ? __fget+0x295/0x400 [ 49.849014] ? expand_files.part.8+0x700/0x700 [ 49.855693] ? kasan_check_read+0x11/0x20 [ 49.862414] ? _copy_to_user+0x91/0xb0 [ 49.867419] ? __fget_light+0x174/0x1e0 [ 49.872219] ? __fdget+0xe/0x10 [ 49.876456] __sys_sendmsg+0xd9/0x180 [ 49.881675] ? __ia32_sys_shutdown+0x70/0x70 [ 49.886912] ? __x64_sys_futex+0x1cb/0x3a0 [ 49.891721] ? fd_install+0x47/0x60 [ 49.895623] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.902390] __x64_sys_sendmsg+0x73/0xb0 [ 49.907451] do_syscall_64+0xd0/0x4e0 [ 49.912537] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.918770] RIP: 0033:0x461229 [ 49.922875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 49.946798] RSP: 002b:00007f99790331a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.959742] RAX: ffffffffffffffda RBX: 000000000052bfa8 RCX: 0000000000461229 [ 49.968686] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 49.977001] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 49.986561] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 49.995425] R13: 00000000004f6ab8 R14: 00000000004b3761 R15: 00007f99790336bc [ 50.496423] BUG: sleeping function called from invalid context at kernel/workqueue.c:2861 [ 50.507759] in_atomic(): 1, irqs_disabled(): 0, pid: 6652, name: syz-executor.4 [ 50.519406] 2 locks held by syz-executor.4/6652: [ 50.525833] #0: 000000003c3084c3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 50.534859] #1: 00000000a7b38e30 (&qdisc_rx_lock){+...}, at: red_change+0x40a/0x1870 [ 50.544530] Preemption disabled at: [ 50.544542] [] red_change+0x40a/0x1870 [ 50.557491] CPU: 1 PID: 6652 Comm: syz-executor.4 Tainted: G W 4.19.182-syzkaller #0 [ 50.569510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.580708] Call Trace: [ 50.584843] dump_stack+0x123/0x171 [ 50.590020] ? red_change+0x40a/0x1870 [ 50.597393] ___might_sleep.cold.86+0x1bb/0x1f4 [ 50.603702] __might_sleep+0x95/0x190 [ 50.609170] __flush_work+0xc7/0x800 [ 50.616056] ? __kasan_slab_free+0x102/0x150 [ 50.623868] ? kasan_slab_free+0xe/0x10 [ 50.629397] ? insert_work+0x350/0x350 [ 50.634813] ? mark_held_locks+0xc7/0x130 [ 50.641413] ? try_to_grab_pending+0xaf/0x5e0 [ 50.650677] ? __cancel_work_timer+0x14f/0x430 [ 50.658318] ? cancel_work_sync+0xb/0x10 [ 50.665872] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 50.672564] ? __cancel_work_timer+0x14f/0x430 [ 50.678846] ? trace_hardirqs_on+0x28/0x190 [ 50.684252] __cancel_work_timer+0x2f1/0x430 [ 50.690180] ? try_to_grab_pending+0x5e0/0x5e0 [ 50.696469] ? hrtimer_try_to_cancel+0x6c/0x510 [ 50.701848] ? hrtimer_fixup_activate+0x20/0x20 [ 50.711153] ? mark_held_locks+0xc7/0x130 [ 50.718333] cancel_work_sync+0xb/0x10 [ 50.724785] htb_destroy+0x20/0x4c0 [ 50.729672] ? htb_reset+0x2cd/0x4c0 [ 50.734937] qdisc_destroy+0x134/0x6d0 [ 50.742323] ? do_raw_spin_lock+0xd0/0x240 [ 50.749408] red_change+0x626/0x1870 [ 50.755969] ? apparmor_capable+0x224/0x420 [ 50.761464] ? red_enqueue+0x1fd0/0x1fd0 [ 50.767160] ? nla_strcmp+0x99/0xe0 [ 50.774199] tc_modify_qdisc+0xbd9/0x18f0 [ 50.779962] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 50.785363] ? qdisc_create+0xf60/0xf60 [ 50.791329] ? find_held_lock+0x36/0x1d0 [ 50.797430] rtnetlink_rcv_msg+0x34f/0x8f0 [ 50.802990] ? rtnetlink_put_metrics+0x490/0x490 [ 50.808921] ? find_held_lock+0x36/0x1d0 [ 50.814320] netlink_rcv_skb+0x13e/0x3d0 [ 50.819537] ? lock_downgrade+0x860/0x860 [ 50.824851] ? rtnetlink_put_metrics+0x490/0x490 [ 50.830607] ? netlink_ack+0xa70/0xa70 [ 50.837015] ? netlink_deliver_tap+0x182/0xb00 [ 50.843957] rtnetlink_rcv+0x10/0x20 [ 50.849032] netlink_unicast+0x445/0x640 [ 50.854272] ? netlink_attachskb+0x6d0/0x6d0 [ 50.859118] ? _copy_from_iter_full+0x182/0x720 [ 50.865828] ? __check_object_size+0x1ef/0x310 [ 50.873115] ? security_socket_getpeersec_dgram+0x53/0xa0 [ 50.879496] netlink_sendmsg+0x764/0xc70 [ 50.884212] ? netlink_unicast+0x640/0x640 [ 50.889797] ? apparmor_socket_sendmsg+0x1b/0x20 [ 50.895425] ? netlink_unicast+0x640/0x640 [ 50.902077] sock_sendmsg+0xb5/0xf0 [ 50.906325] ___sys_sendmsg+0x647/0x950 [ 50.910719] ? find_held_lock+0x36/0x1d0 [ 50.915532] ? copy_msghdr_from_user+0x430/0x430 [ 50.921371] ? __fget+0x278/0x400 [ 50.925710] ? kasan_check_read+0x11/0x20 [ 50.931041] ? __fget+0x295/0x400 [ 50.936475] ? expand_files.part.8+0x700/0x700 [ 50.943559] ? kasan_check_read+0x11/0x20 [ 50.949818] ? _copy_to_user+0x91/0xb0 [ 50.954717] ? __fget_light+0x174/0x1e0 [ 50.960590] ? __fdget+0xe/0x10 [ 50.964915] __sys_sendmsg+0xd9/0x180 [ 50.969930] ? __ia32_sys_shutdown+0x70/0x70 [ 50.974865] ? __x64_sys_futex+0x1cb/0x3a0 [ 50.979567] ? fd_install+0x47/0x60 [ 50.984235] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.991567] __x64_sys_sendmsg+0x73/0xb0 [ 50.996818] do_syscall_64+0xd0/0x4e0 [ 51.001408] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.008032] RIP: 0033:0x461229 [ 51.012964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 51.037782] RSP: 002b:00007ff1834871a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.047696] RAX: ffffffffffffffda RBX: 000000000052bfa8 RCX: 0000000000461229 [ 51.056918] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 51.065149] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 51.075421] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 51.084189] R13: 00000000004f6ab8 R14: 00000000004b3761 R15: 00007ff1834876bc [ 51.565308] BUG: sleeping function called from invalid context at kernel/workqueue.c:2861 [ 51.576210] in_atomic(): 1, irqs_disabled(): 0, pid: 6672, name: syz-executor.4 [ 51.585937] 2 locks held by syz-executor.4/6672: [ 51.591580] #0: 000000003c3084c3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 51.601219] #1: 000000009e52d58b (&qdisc_rx_lock){+...}, at: red_change+0x40a/0x1870 [ 51.611283] Preemption disabled at: [ 51.611295] [] red_change+0x40a/0x1870 [ 51.623047] CPU: 0 PID: 6672 Comm: syz-executor.4 Tainted: G W 4.19.182-syzkaller #0 [ 51.633391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.643918] Call Trace: [ 51.648039] dump_stack+0x123/0x171 [ 51.652396] ? red_change+0x40a/0x1870 [ 51.656481] ___might_sleep.cold.86+0x1bb/0x1f4 [ 51.662236] __might_sleep+0x95/0x190 [ 51.666993] __flush_work+0xc7/0x800 [ 51.672330] ? __kasan_slab_free+0x102/0x150 [ 51.677368] ? kasan_slab_free+0xe/0x10 [ 51.682551] ? insert_work+0x350/0x350 [ 51.687939] ? mark_held_locks+0xc7/0x130 [ 51.693183] ? try_to_grab_pending+0xaf/0x5e0 [ 51.698734] ? __cancel_work_timer+0x14f/0x430 [ 51.704344] ? cancel_work_sync+0xb/0x10 [ 51.710590] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 51.718290] ? __cancel_work_timer+0x14f/0x430 [ 51.724183] ? trace_hardirqs_on+0x28/0x190 [ 51.730195] __cancel_work_timer+0x2f1/0x430 [ 51.738245] ? try_to_grab_pending+0x5e0/0x5e0 [ 51.745975] ? hrtimer_try_to_cancel+0x6c/0x510 [ 51.752011] ? hrtimer_fixup_activate+0x20/0x20 [ 51.758336] ? mark_held_locks+0xc7/0x130 [ 51.763075] cancel_work_sync+0xb/0x10 [ 51.769631] htb_destroy+0x20/0x4c0 [ 51.774897] ? htb_reset+0x2cd/0x4c0 [ 51.781025] qdisc_destroy+0x134/0x6d0 [ 51.787203] ? do_raw_spin_lock+0xd0/0x240 [ 51.792467] red_change+0x626/0x1870 [ 51.796462] ? apparmor_capable+0x224/0x420 [ 51.802391] ? red_enqueue+0x1fd0/0x1fd0 [ 51.807125] ? nla_strcmp+0x99/0xe0 [ 51.811666] tc_modify_qdisc+0xbd9/0x18f0 [ 51.816997] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 51.822385] ? qdisc_create+0xf60/0xf60 [ 51.826441] ? find_held_lock+0x36/0x1d0 [ 51.831252] rtnetlink_rcv_msg+0x34f/0x8f0 [ 51.835848] ? rtnetlink_put_metrics+0x490/0x490 [ 51.841672] ? find_held_lock+0x36/0x1d0 [ 51.847036] netlink_rcv_skb+0x13e/0x3d0 [ 51.851653] ? lock_downgrade+0x860/0x860 [ 51.856651] ? rtnetlink_put_metrics+0x490/0x490 [ 51.862007] ? netlink_ack+0xa70/0xa70 [ 51.866701] ? netlink_deliver_tap+0x182/0xb00 [ 51.871635] rtnetlink_rcv+0x10/0x20 [ 51.875989] netlink_unicast+0x445/0x640 [ 51.881140] ? netlink_attachskb+0x6d0/0x6d0 [ 51.886016] ? _copy_from_iter_full+0x182/0x720 [ 51.891216] ? __check_object_size+0x1ef/0x310 [ 51.896790] ? security_socket_getpeersec_dgram+0x53/0xa0 [ 51.903725] netlink_sendmsg+0x764/0xc70 [ 51.908726] ? netlink_unicast+0x640/0x640 [ 51.915218] ? apparmor_socket_sendmsg+0x1b/0x20 [ 51.920893] ? netlink_unicast+0x640/0x640 [ 51.926060] sock_sendmsg+0xb5/0xf0 [ 51.929676] ___sys_sendmsg+0x647/0x950 [ 51.934432] ? find_held_lock+0x36/0x1d0 [ 51.940560] ? copy_msghdr_from_user+0x430/0x430 [ 51.946267] ? __fget+0x278/0x400 [ 51.950735] ? kasan_check_read+0x11/0x20 [ 51.955854] ? __fget+0x295/0x400 [ 51.960140] ? expand_files.part.8+0x700/0x700 [ 51.965092] ? kasan_check_read+0x11/0x20 [ 51.970434] ? _copy_to_user+0x91/0xb0 [ 51.976400] ? __fget_light+0x174/0x1e0 [ 51.982261] ? __fdget+0xe/0x10 [ 51.986187] __sys_sendmsg+0xd9/0x180 [ 51.990593] ? __ia32_sys_shutdown+0x70/0x70 [ 51.996470] ? __x64_sys_futex+0x1cb/0x3a0 [ 52.001094] ? fd_install+0x47/0x60 [ 52.005359] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.012597] __x64_sys_sendmsg+0x73/0xb0 [ 52.017492] do_syscall_64+0xd0/0x4e0 [ 52.022301] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.028241] RIP: 0033:0x461229 [ 52.031433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 52.054429] RSP: 002b:00007ff1834871a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.064106] RAX: ffffffffffffffda RBX: 000000000052bfa8 RCX: 0000000000461229 [ 52.073865] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 52.082281] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 52.091701] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 52.100394] R13: 00000000004f6ab8 R14: 00000000004b3761 R15: 00007ff1834876bc [ 52.825802] BUG: sleeping function called from invalid context at kernel/workqueue.c:2861 [ 52.835908] in_atomic(): 1, irqs_disabled(): 0, pid: 6694, name: syz-executor.2 [ 52.844409] 2 locks held by syz-executor.2/6694: [ 52.849958] #0: 000000003c3084c3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 52.859613] #1: 0000000015dbd958 (&qdisc_rx_lock){+...}, at: red_change+0x40a/0x1870 [ 52.869149] Preemption disabled at: [ 52.869161] [] red_change+0x40a/0x1870 [ 52.881490] CPU: 1 PID: 6694 Comm: syz-executor.2 Tainted: G W 4.19.182-syzkaller #0 [ 52.895552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.906748] Call Trace: [ 52.909436] dump_stack+0x123/0x171 [ 52.914547] ? red_change+0x40a/0x1870 [ 52.919151] ___might_sleep.cold.86+0x1bb/0x1f4 [ 52.924546] __might_sleep+0x95/0x190 [ 52.928764] __flush_work+0xc7/0x800 [ 52.933240] ? __kasan_slab_free+0x102/0x150 [ 52.938336] ? kasan_slab_free+0xe/0x10 [ 52.943541] ? insert_work+0x350/0x350 [ 52.948444] ? mark_held_locks+0xc7/0x130 [ 52.953173] ? try_to_grab_pending+0xaf/0x5e0 [ 52.958712] ? __cancel_work_timer+0x14f/0x430 [ 52.964079] ? cancel_work_sync+0xb/0x10 [ 52.969480] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 52.974903] ? __cancel_work_timer+0x14f/0x430 [ 52.980988] ? trace_hardirqs_on+0x28/0x190 [ 52.987020] __cancel_work_timer+0x2f1/0x430 [ 52.992259] ? try_to_grab_pending+0x5e0/0x5e0 [ 53.000557] ? hrtimer_try_to_cancel+0x6c/0x510 [ 53.006738] ? hrtimer_fixup_activate+0x20/0x20 [ 53.013904] ? mark_held_locks+0xc7/0x130 [ 53.020271] cancel_work_sync+0xb/0x10 [ 53.026949] htb_destroy+0x20/0x4c0 [ 53.031268] ? htb_reset+0x2cd/0x4c0 [ 53.036080] qdisc_destroy+0x134/0x6d0 [ 53.041263] ? do_raw_spin_lock+0xd0/0x240 [ 53.046837] red_change+0x626/0x1870 [ 53.051639] ? apparmor_capable+0x224/0x420 [ 53.056323] ? red_enqueue+0x1fd0/0x1fd0 [ 53.062297] ? nla_strcmp+0x99/0xe0 [ 53.066947] tc_modify_qdisc+0xbd9/0x18f0 [ 53.072626] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 53.079465] ? qdisc_create+0xf60/0xf60 [ 53.084424] ? find_held_lock+0x36/0x1d0 [ 53.089101] rtnetlink_rcv_msg+0x34f/0x8f0 [ 53.094274] ? rtnetlink_put_metrics+0x490/0x490 [ 53.100139] ? find_held_lock+0x36/0x1d0 [ 53.105867] netlink_rcv_skb+0x13e/0x3d0 [ 53.111204] ? lock_downgrade+0x860/0x860 [ 53.116785] ? rtnetlink_put_metrics+0x490/0x490 [ 53.124067] ? netlink_ack+0xa70/0xa70 [ 53.129363] ? netlink_deliver_tap+0x182/0xb00 [ 53.134877] rtnetlink_rcv+0x10/0x20 [ 53.139629] netlink_unicast+0x445/0x640 [ 53.146733] ? netlink_attachskb+0x6d0/0x6d0 [ 53.152405] ? _copy_from_iter_full+0x182/0x720 [ 53.159136] ? __check_object_size+0x1ef/0x310 [ 53.165291] ? security_socket_getpeersec_dgram+0x53/0xa0 [ 53.171552] netlink_sendmsg+0x764/0xc70 [ 53.177071] ? netlink_unicast+0x640/0x640 [ 53.182853] ? apparmor_socket_sendmsg+0x1b/0x20 [ 53.188859] ? netlink_unicast+0x640/0x640 [ 53.193524] sock_sendmsg+0xb5/0xf0 [ 53.198251] ___sys_sendmsg+0x647/0x950 [ 53.202583] ? find_held_lock+0x36/0x1d0 [ 53.207062] ? copy_msghdr_from_user+0x430/0x430 [ 53.212573] ? __fget+0x278/0x400 [ 53.216804] ? kasan_check_read+0x11/0x20 [ 53.222151] ? __fget+0x295/0x400 [ 53.225896] ? expand_files.part.8+0x700/0x700 [ 53.231771] ? kasan_check_read+0x11/0x20 [ 53.237073] ? _copy_to_user+0x91/0xb0 [ 53.242988] ? __fget_light+0x174/0x1e0 [ 53.247751] ? __fdget+0xe/0x10 [ 53.251909] __sys_sendmsg+0xd9/0x180 [ 53.256643] ? __ia32_sys_shutdown+0x70/0x70 [ 53.262020] ? __x64_sys_futex+0x1cb/0x3a0 [ 53.266846] ? fd_install+0x47/0x60 [ 53.271101] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.277452] __x64_sys_sendmsg+0x73/0xb0 [ 53.282918] do_syscall_64+0xd0/0x4e0 [ 53.286977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.293893] RIP: 0033:0x461229 [ 53.297667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 53.320310] RSP: 002b:00007f9e4b2021a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 2021/03/23 07:10:54 executed programs: 35 [ 53.329319] RAX: ffffffffffffffda RBX: 000000000052bfa8 RCX: 0000000000461229 [ 53.337831] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 53.345932] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 53.354345] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 53.363257] R13: 00000000004f6ab8 R14: 00000000004b3761 R15: 00007f9e4b2026bc [ 53.926491] BUG: sleeping function called from invalid context at kernel/workqueue.c:2861 [ 53.936605] in_atomic(): 1, irqs_disabled(): 0, pid: 6714, name: syz-executor.1 [ 53.945100] 2 locks held by syz-executor.1/6714: [ 53.952098] #0: 000000003c3084c3 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 53.963018] #1: 0000000019317d8e (&qdisc_rx_lock){+...}, at: red_change+0x40a/0x1870 [ 53.972881] Preemption disabled at: [ 53.972894] [] red_change+0x40a/0x1870 [ 53.984413] CPU: 1 PID: 6714 Comm: syz-executor.1 Tainted: G W 4.19.182-syzkaller #0 [ 53.996676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.010782] Call Trace: [ 54.016466] dump_stack+0x123/0x171 [ 54.023186] ? red_change+0x40a/0x1870 [ 54.034351] ___might_sleep.cold.86+0x1bb/0x1f4 [ 54.043460] __might_sleep+0x95/0x190 [ 54.048204] __flush_work+0xc7/0x800 [ 54.054730] ? __kasan_slab_free+0x102/0x150 [ 54.062072] ? kasan_slab_free+0xe/0x10 [ 54.068160] ? insert_work+0x350/0x350 [ 54.073398] ? mark_held_locks+0xc7/0x130 [ 54.079325] ? try_to_grab_pending+0xaf/0x5e0 [ 54.087163] ? __cancel_work_timer+0x14f/0x430 [ 54.094194] ? cancel_work_sync+0xb/0x10 [ 54.098260] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 54.105144] ? __cancel_work_timer+0x14f/0x430 [ 54.111368] ? trace_hardirqs_on+0x28/0x190 [ 54.117120] __cancel_work_timer+0x2f1/0x430 [ 54.122594] ? try_to_grab_pending+0x5e0/0x5e0 [ 54.128408] ? hrtimer_try_to_cancel+0x6c/0x510 [ 54.134115] ? hrtimer_fixup_activate+0x20/0x20 [ 54.142106] ? mark_held_locks+0xc7/0x130 [ 54.147957] cancel_work_sync+0xb/0x10 [ 54.152829] htb_destroy+0x20/0x4c0 [ 54.158099] ? htb_reset+0x2cd/0x4c0 [ 54.166313] qdisc_destroy+0x134/0x6d0 [ 54.171964] ? do_raw_spin_lock+0xd0/0x240 [ 54.178476] red_change+0x626/0x1870 [ 54.183687] ? apparmor_capable+0x224/0x420 [ 54.189303] ? red_enqueue+0x1fd0/0x1fd0 [ 54.194643] ? nla_strcmp+0x99/0xe0 [ 54.199668] tc_modify_qdisc+0xbd9/0x18f0 [ 54.204442] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 54.211177] ? qdisc_create+0xf60/0xf60 [ 54.216260] ? find_held_lock+0x36/0x1d0 [ 54.221277] rtnetlink_rcv_msg+0x34f/0x8f0 [ 54.226315] ? rtnetlink_put_metrics+0x490/0x490 [ 54.231700] ? find_held_lock+0x36/0x1d0 [ 54.236314] netlink_rcv_skb+0x13e/0x3d0 [ 54.240500] ? lock_downgrade+0x860/0x860 [ 54.244768] ? rtnetlink_put_metrics+0x490/0x490 [ 54.250997] ? netlink_ack+0xa70/0xa70 [ 54.255548] ? netlink_deliver_tap+0x182/0xb00 [ 54.261021] rtnetlink_rcv+0x10/0x20 [ 54.265197] netlink_unicast+0x445/0x640 [ 54.270468] ? netlink_attachskb+0x6d0/0x6d0 [ 54.276161] ? _copy_from_iter_full+0x182/0x720 [ 54.282535] ? __check_object_size+0x1ef/0x310 [ 54.288130] ? security_socket_getpeersec_dgram+0x53/0xa0 [ 54.294821] netlink_sendmsg+0x764/0xc70 [ 54.299657] ? netlink_unicast+0x640/0x640 [ 54.304781] ? apparmor_socket_sendmsg+0x1b/0x20 [ 54.311103] ? netlink_unicast+0x640/0x640 [ 54.316420] sock_sendmsg+0xb5/0xf0 [ 54.321360] ___sys_sendmsg+0x647/0x950 [ 54.326843] ? find_held_lock+0x36/0x1d0 [ 54.332164] ? copy_msghdr_from_user+0x430/0x430 [ 54.338574] ? __fget+0x278/0x400 [ 54.342657] ? kasan_check_read+0x11/0x20 [ 54.348033] ? __fget+0x295/0x400 [ 54.353348] ? expand_files.part.8+0x700/0x700 [ 54.359292] ? kasan_check_read+0x11/0x20 [ 54.364708] ? _copy_to_user+0x91/0xb0 [ 54.369512] ? __fget_light+0x174/0x1e0 [ 54.374893] ? __fdget+0xe/0x10 [ 54.378505] __sys_sendmsg+0xd9/0x180 [ 54.384138] ? __ia32_sys_shutdown+0x70/0x70 [ 54.389091] ? __x64_sys_futex+0x1cb/0x3a0 [ 54.394601] ? fd_install+0x47/0x60 [ 54.399932] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.407160] __x64_sys_sendmsg+0x73/0xb0 [ 54.412418] do_syscall_64+0xd0/0x4e0 [ 54.416923] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.424316] RIP: 0033:0x461229 [ 54.427800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 54.451304] RSP: 002b:00007f7ef30c11a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.461829] RAX: ffffffffffffffda RBX: 000000000052bfa8 RCX: 0000000000461229 [ 54.471243] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004